Remove dependency on AES-GCM as the means to achieve authenticated
encryption.  Instead, use the sender's and receiver's public/private key
pairs to sign ciphertext and verify it before decrypting (achieves the
same semantics as Encrypt-Then-MAC, abeit more slowly since it's RSA).